License management system, license management device, relay device and terminal device

License management system, license management equipment, relay equipment and terminal equipment

Technical field

The present invention relates to a license management system and other systems for distributing license information. The license management system distributes license information from a management device to a terminal device used by a user. It is possible to use a content under a usage rule, and the user requests to use a certain content via a communication network and a relay device.

Background technique

In recent years, a variety of systems for distributing certain digital products such as music, video, and games via the Internet or digital broadcasting have been developed, and some of them are now in actual use. In order to distribute these contents, correct management and usage control (DRM: Digital Rights Management) methodology that restricts reproduction (playback), movement, and copy of the amount of distributed contents has been reviewed from the viewpoint of copyright protection and the like.

Conventional license management systems, such as Patent Application Nos. 2000-48076 and 2000-293439 published in Japan, have been simulated to distribute the license information of the content for each user together with the content itself to a receiver. Terminal so that everything can be managed by a user terminal.

For example, if a user wants to purchase the right to watch a certain content (such as a movie) three times, the user terminal receives the content and license information indicating that "the movie can be watched three times" via communication from a distribution server, And according to the usage rules contained in the license information, the playback of the content is under management. Once the above-mentioned license information is sent to the user terminal, the distribution server no longer involves the user's license information.

The user terminal manages all the license information of the user under these systems, so the function of the user terminal is expanded, which leads to complicated rights processing. Therefore, there is a problem that it is necessary to use an expensive CPU and other equipment, so that the user terminal becomes expensive accordingly. There is also the problem of losing all purchased license information when the hard disk storing the license information of the user terminal is damaged.

To solve these problems, a system for protecting the copyright of a content has been proposed, in which a management device dynamically manages the use right (license) of each content and distributes the content in response to a request from a user terminal. The license information aspect of the usage rules of the use of the said usage rights is given to the user who purchases the content so as to allow the user to use the content within the scope of the usage rules contained in the said usage rules. The license information is as disclosed in Japanese Laid-Open Patent Application No. H10-632364.

According to the system, only simple processing is required to allow the user to use the content within the scope of the usage rule, so the user terminal can be configured at a low price. In addition, since the management device dynamically manages the use right (license information) of each content, the use right is given to the user who purchased the content, and the user terminal can obtain unrequested license information.

In the system having these advantages, in response to an increase in distributed contents and higher-level copyright protection requests for these contents, terminal designs with multiple copyright protection functions for these contents are also increasingly emerging.

Some terminal devices with copyright protection functions are not directly connected to the network. A storage medium like a CD card, a printer, etc. corresponds to that type of terminal device. The license information needs to be rebroadcast in order for those terminal devices to obtain the license information. In this case, it is possible to connect the storage medium or the printer to the terminal connected to the network and have the terminal connected to the network rebroadcast the license information. Note that a terminal device that is connected to a network and rebroadcasts license information will be referred to as a relay device in the following.

The relay device interprets the license information from the viewpoint of copyright protection in the process of rebroadcasting the license information from the management device to the storage medium or the printer. Therefore, the relay device needs to convert the usage rule contained in the license information into a usage rule that depends on the function of the storage medium or the printer. Therefore, when the capacity of the relay device for processing the license information is lower than the capacity of the storage medium or the printer, the following problem may occur: The license information cannot be acquired or the usage rules of the license information are restricted because they are restricted in the relay device. This problem frequently occurs when the version of the relay device is older than the version of the terminal device.

Specifically, when the relay device can process the smallest unit of the usage rule in the usage rule contained in the license information, that is, the right to replay only once, the same is the terminal device This kind of problem frequently occurs when the processing of multiple playback rights can be performed more advanced than that of the relay device. In this case, the relay device must, for example, receive the distribution of replay rights once in sequence from the management device, store multiple one-time replay rights in itself, and store these once after the storage is completed. The reproduction rights are distributed to the terminal devices one by one. This type of processing leads to inefficient communication.

On the other hand, when the management device sends the multiple-time playback right to the relay device, it is assumed that the relay device subdivides the multiple-time playback right into the smallest unit of one-time playback right, And distribute them one by one to the terminal equipment. However, this type of processing also leads to inefficient communication, and the terminal device cannot immediately obtain the multiple-playback right.

In addition, the relay device may interpret the multiple playback right as a one-time (minimum unit) playback right and invalidate the remaining number of playback rights. This type of processing results in the loss of purchased license information.

In addition, if the terminal device with a higher level of processing capability than the relay device is developed in terms of copyright information processing that will be further improved and expanded in the future, the relay device will not be able to respond to such advanced processing.

Summary of the invention

The object of the present invention is to provide a license management system, a license management device, a relay device, and a terminal device, which can prevent the license information issued from the management device to the terminal from being protected from The influence of the relay device, even if there is a functional difference between the relay device and the terminal device in the ability to process license information.

Therefore, in order to achieve the above object, according to one aspect of the present invention, a license management system is provided, which distributes license information from a management device to a terminal device used by a user, and the license information enables It is possible to use a content under a certain usage rule, the user requests to use the content via a communication network and a relay device, and the license management system includes the management device, the relay device, and the terminal device , Wherein the management device includes: a use request analysis unit for obtaining a content use request from the terminal device via the relay device, and analyze the obtained use request; a use environment information analysis unit for using To obtain the first use environment information from the relay device and analyze the obtained first use environment information, the first use environment information indicates the use rule processing capability of the terminal device; a license information is generated A unit for generating license information, the license information including a usage rule corresponding to the usage request and the analysis result of the first usage environment information; an instruction information generating unit for generating instructions Information, the instruction information indicates how to process the license information in the relay device based on the analysis result of the first use environment information; and a license information sending unit for making the generated instruction Information is embedded in the license information, and the license information is sent to the relay device, and the relay device includes: a license information receiving unit for receiving the instruction information embedded therein The license information; and a transmission unit for transmitting the received license information with or without performing any processing on the license information according to the instruction information embedded in the license information The license information is transmitted to the terminal device.

According to another aspect of the present invention, there is provided a license management device in a license management system, the device distributes license information to a terminal device used by a user, and the license information is used in a certain It is possible to use a content under usage rules. The user requests to use the content via a communication network and a relay device. The license management device includes: a usage request analysis unit for downloading the content from the relay device via the relay device. The terminal device obtains a content use request, and analyzes the obtained use request; a use environment information analysis unit for obtaining the first use environment information from the relay device and the obtained first use environment information For analysis, the first use environment information indicates the use rule processing capability of the terminal device; a license information generating unit is used to generate license information, the license information includes a use rule, and the use rule is consistent with the use rule. The request corresponds to the analysis result of the first use environment information; an instruction information generating unit is used to generate instruction information, which indicates how to deal with the analysis result of the first use environment information based on the analysis result of the first use environment information. And a license information sending unit for embedding the generated instruction information into the license information and sending the license information to the relay device.

According to another aspect of the present invention, there is provided a relay device in a license management system connected between a terminal device that uses a certain content and a management device that issues license information via a communication network, The license information makes it possible to use the content under a certain usage rule, and the relay device includes: a usage request relay unit for receiving a usage request for a certain content from the terminal device and transferring all the content. The use request is sent to the management device; a license information receiving unit for receiving license information in which instruction information is embedded; and a transmission unit for receiving instruction information based on the instruction information embedded in the license information , Transmitting the received license information to the terminal device without performing any processing on the license information.

According to another aspect of the present invention, there is provided a terminal device in a license management system that distributes license information from a management device to a terminal device used by a user. The license information makes it possible to use a content under a certain usage rule. The user requests to use the content via a communication network and a relay device. The terminal device includes: a usage environment information storage unit for pre-storing the representation The use environment information of the use rule processing capability of the terminal device itself; a notification unit for notifying the relay device of the use environment information of the terminal device read out from the use environment information storage unit, And a content use unit for using the content distributed from the management device according to the use rule corresponding to the license information of the content.

According to another aspect of the present invention, there is provided a license management method used in a system that distributes license information from a management device to a terminal device used by a user, and the license information To make it possible to use a content under a certain usage rule, the user requests to use the content via a communication network and a relay device, and the license management method includes: the management device executes a step (A); and A step (B) is executed by the relay device, wherein the step (A) includes: a use request analysis step for obtaining a content use request from the terminal device via the relay device, and analyzing The obtained use request; a use environment information analysis step for obtaining the first use environment information from the relay device and analyzing the obtained first use environment information, the first use environment information indicating the The use rule processing capability of the terminal device; a license information generation step for generating license information, the license information includes a use rule, and the use rule corresponds to the use request and the analysis result of the first use environment information Corresponding; an instruction information generating step for generating instruction information indicating how to process the license information in the relay device based on the analysis result of the first use environment information; and a license The license information sending step is used to embed the generated instruction information into the license information and send the license information to the relay device, and the step (B) includes: a license information A receiving step for receiving the license information in which the instruction information is embedded; and a transmitting step for performing certain processing on the license information or not performing any processing, according to the embedded The instruction information in the license information transmits the received license information to the terminal device.

As described above, the present invention makes it possible to protect the copyright of a content and simultaneously use a service such as a playback or printing of the content in content use terminals having different types, functions, and usage methods. In addition, the present invention enables the so-called "one source, multiple use", that is, the present invention makes it possible to use one content for multiple purposes or to reuse it. Therefore, the present invention is extremely important especially in recent years when content distribution has become popular with the expansion of broadband networks.

Description of the drawings

These and other objects, advantages and features of the present invention will become clear from the following description in conjunction with the accompanying drawings, which describe a specific embodiment of the present invention. In these drawings: FIG. 1 is a diagram showing the entire structure of a license management system 1 according to an embodiment of the present invention.

Fig. 2A is a chart showing the capabilities of each device included in the system.

Fig. 2B is a diagram showing a method suitable for a relay device with a lower capability.

FIG. 2C is a diagram showing the through mode method according to the present invention.

Fig. 3A is a graph showing the capabilities of each device included in the system.

Fig. 3B is a diagram showing a method suitable for a relay device with a lower capability.

FIG. 3C is a diagram showing the bulk mode method according to the present invention.

Fig. 4 is a block diagram showing a specific functional structure of each device shown in Fig. 1.

FIG. 5 is a block diagram showing the detailed functional structure of an SD card 40, a printer 50, and a relay device 30 as shown in FIG. 1.

FIG. 6 is a block diagram showing the detailed functional structure of the management device 10 shown in FIG. 1.

FIG. 7 is a diagram showing an example of the use environment information of the digital TV 20 stored in a use environment information management unit 230.

FIG. 8 is a diagram showing an example of the use environment information of the relay device 30, the SD card 40, and the printer 50 stored in a use environment information management unit 340.

Fig. 9 is a diagram showing the format structure of a message of the use environment information.

FIG. 10A is a graph showing the use environment information in a case where there is a use request notification from the SD card 40. As shown in FIG.

FIG. 10B is a chart showing the use environment information in the case where there is a use request notification from the printer 50.

Fig. 11 is a diagram showing the format structure of LT in the standard mode.

FIG. 12 is a diagram showing the format structure of a content key descriptor (content keydescriptor) 8221 shown in FIG. 11.

FIG. 13 is a diagram showing the format structure of a preview key descriptor (preview keydescriptor) 8222 shown in FIG. 11.

FIG. 14 is a diagram showing the format structure of an action descriptor (action descriptor) 8223 shown in FIG. 11.

FIG. 15 is a graph showing the relationship between a storable period (effective time period), a minimum continuous duration, and a maximum continuous duration.

Fig. 16 is a diagram showing the format structure of LT in the pass mode.

Fig. 17 is a diagram showing the format structure of LT in batch mode.

Fig. 18 is a diagram showing the format structure of a usage rejection notice.

FIG. 19 is a flowchart of a content use relay service process executed by the printer 50.

FIG. 20 is a flowchart of a content-use relay service process executed by the relay device 30.

FIG. 21 is a flowchart of a content usage rule distribution service process executed by the management device 10.

Fig. 22 is a flowchart showing the details of the control mode determination processing shown in Fig. 21.

FIG. 23A is a graph showing the LT of a passing mode generated in step S107 as shown in FIG. 21.

FIG. 23B is a graph showing the LT of a batch mode generated in step S107 as shown in FIG. 21.

FIG. 24A shows the sequence of communication among the SD card 40, the relay device 30, and the management device 10 included in the license management system 1.

FIG. 24B shows the sequence of communication among the printer 50, the relay device 30, and the management device 10 included in the license management system 1.

detailed description

The following is an illustration of a license management system according to an embodiment of the present invention with reference to the drawings.

Fig. 1 is a diagram showing the entire structure of a license management system 1 according to an embodiment of the present invention.

The license management system 1 is a system for protecting the copyright of a content, in which a center dynamically manages the use right (license) of each content and distributes license information (hereinafter referred to as a license ticket (or LT)) Play a core role, the right to use each content is given to users who purchase the digital content, the digital content includes at least images, sounds or data, such as music, still images, movies or books, the license The information includes usage rules for using the content, and when the content is used, it responds to a request from a user who uses the content, so that the user can use the content within the scope of the usage rules included in the LT. The license management system 1 includes a management device, user terminals 20-50 used by users who use the content, and a network 60; the management device is located in the center and includes a sending and receiving unit 110, a The copyright information management unit 120 and a copyright information conversion unit 130; the network 60 is connected to the management device 10, the user terminal 20, and the user terminal 30 for mutual communication and communication of use requests, use environment information, and LT.

It is worth noting that the license information (LT) includes usage restriction information (usage rules) for users (such as a writer or the copyright holder of the content), and the user has the right to distribute a content for To distribute the content, the license information (LT) also includes various types of information (such as a content key used to decrypt an encrypted content) required when the content is used.

The management device 10 is a computer device with a device copyright protection function, such as a workstation. The management device 10, for example, is managed by a BS/CS digital broadcasting station, an Internet broadcasting station, and a copyright information management group. , And the management device 10 functions as a license management server and so on. Specifically, the management device 10 manages a user who joins the system 1 and a terminal owned by the user, accepts a content purchase from the user terminal, etc., accepts a content use request from the user terminal, etc., or indicates The user terminal processes the use environment information (first use environment information) of the ability of a use rule, collects the content fee in response to a content purchase request of the user terminal, and distributes the encrypted content to the user terminal , And in response to a user request, an LT is allocated to enable the user to use the encrypted content on the user terminal. The LT includes a content key, etc., used to decrypt the encrypted content, a cutout usage rule, in which the cutout usage rule will give the user the right to use the content A part of the (license) is cut and the instruction information used to control the relay processing of the LT (a standard mode: N, a pass mode: T, a batch mode: B).

The user terminals 20, 30, 40, 45, and 50 are computer devices with copyright protection functions. These computer devices send a content purchase request to receive the distribution of the content, and send a use request or use of the content. The environment information is used to receive an LT and play the content within the scope of the cut usage rule of the LT, and function as a client of the management device 10.

Specifically, the user terminal 20 is a digital TV or a similar device that includes a receiver, and the user terminal 30 is a receiver, that is, a set-top box or a home personal computer, etc., and the receiver can connect the user terminal 40 or the user terminal 50 is connected to its own terminal and relays user requests or LT of these terminals. The user terminal 40 is a storage medium, such as an SD memory card or a D-VHS recorder. The user terminal 45 is an SD The SD player can connect the user terminal 40 to itself so that the user can use a content stored in the user terminal 40 within the scope of usage rules, and the user terminal 50 is a printer. It is worth noting that, in order to clearly distinguish each user terminal, the user terminal 20, the user terminal 30, the user terminal 40, the user terminal 45, and the user terminal 50 will be referred to as the digital TV 20, the relay device 30, and the SD hereinafter, respectively. Card 40, SD player 45, and printer 50.

The network 60 is a broadband cable communication medium, such as the Internet and a CATV, or a wireless communication medium, such as digital broadcasting.

When a user of the digital TV 20 wants to play a predetermined content on the digital TV 20 a total of five times, the user uses the operation keys (not shown) of the digital TV 20 to purchase from the management device 10 to play the Right to content five times. The management device 10 uses a copyright-related information database (DB) 124 of the copyright information management unit 120 to manage a playback right purchased by the user for playing the content five times. When the user wants to play the content on the digital TV 20 once, he/she uses the operation keys (not shown) of the digital TV 20 to input one-time play. Then, the digital TV 20 sends a use request for playing once (see 1 in Fig. 1) and the use environment information α (first use environment information) of the digital TV 20 to the management device 10 via the network 60.

When the sending and receiving unit 110 of the management device 10 receives the one-time use request and the use environment information α, the copyright information management unit 120 of the management device 10 determines the use received by the sending and receiving unit 110 Whether the environmental information is only used for the digital TV 20. When the result of the determination is that it is only used for the digital TV 20, the copyright information management unit 120 determines whether the instruction information to be embedded in an LT (hereinafter referred to as "control mode") is a standard mode, the The LT is to be sent in response to the use request from the digital TV 20. Based on the use request, the copyright information management unit 120 cuts the playback right of one playback among the purchased five rights, and generates a file with the instruction information of the standard mode ("N" in FIG. 1) embedded therein. LT, and send the generated LT to the digital TV 20 via the sending and receiving unit 110 and the network 60. Here, the copyright information management unit 120 does not allocate all five playback rights, but manages the remaining four playback rights after the one-time right is cut off. Do the same for the second and subsequent use requests. The digital TV interprets usage rules and the like contained in the received LT so as to enable the user to use (or play) the content based on the usage rules and the like.

When a user of the SD player 45 (SD card 40) wants to play his/her purchased content three times, he/she connects the SD card 40 to the relay device 30 and uses the relay device 30 operation keys (not shown) enter a three-time play. Then, the relay device 30 sends to the management device 10 a three-time use request via the network 60 (see 2 in FIG. 1), the use environment information β of the SD card 40 (first use environment information) And the use environment information γ (second use environment information) of the relay device 30.

When the sending and receiving unit 110 of the management device 10 receives the three-time use request and the use environment information β and γ, the copyright information management unit 120 of the management device 10 will change the use environment information β of the SD card 40. It is compared with the use environment information γ of the relay device 30. When the SD card 40 is more intelligent, that is, when the SD card 40 has a higher LT processing capacity than the relay device 30, the copyright information management unit 120 determines that the instruction information embedded in the LT is a pass-through mode (First instruction information), the LT is sent in response to the use request of the SD card 40. Then, in order to send a batch of three playback rights to the SD memory card, in the copyright information conversion unit 130 of the management device 10, the copyright information management unit 120 converts the rights information (usage rules) into a type of SD card 40 usable format; the copyright information management unit 120 generates LT in which the instruction information of the pass mode ("T" in FIG. 1) is embedded; and the copyright information management unit 120 transfers all information via the sending and receiving unit 110 and the network 60 The generated LT is sent to the relay device 30. The relay device 30 analyzes the instruction information of the LT when receiving the LT. When it is found that the LT is in the pass mode, the relay device 30 passes through (pass through) the LT to the SD card 40 without explaining the usage rules and the like. Therefore, based on the usage rule contained in the LT received by the SD card 40, the SD player 45 can use (play) the content three times.

When a user of the printer 50 wants to print 100 sheets of the purchased content, he/she uses the operation keys (not shown) of the printer 50 to input a 100-sheet print. The relay device 30 sends a use request for 100 prints to the management device 10 via the network 60 (see 3 in FIG. 1), the use environment information δ (first use environment information) of the printer 50, and the relay Use environment information γ of the device 30 (second use environment information).

When the sending and receiving unit 110 of the management device 10 receives the use request for 100 prints and the use environment information δ, γ, the copyright information management unit 120 of the management device 10 determines the use environment information of the printer 50 Whether δ is unknown. When the use environment information δ of the printer 50 is unknown, the copyright information management unit 120 determines whether the instruction information embedded in the LT is a batch mode, and the LT is sent in response to the use request of the printer. In the copyright information conversion unit 130 of the management device 10, the copyright information management unit 120 converts the rights information (usage rules) into multiple formats that make the SD card 40 usable in order to distribute a batch to the printer. A batch of multiple usage rules. These usage rules are the same as 100-sheet printing in terms of content but different in usage mode. The copyright information management unit 120 generates the batch mode embedded therein ("B" in FIG. 1) And the copyright information management unit 120 transmits the generated LT to the relay device 30 via the transmitting and receiving unit 110 and the network 60. Note that the batch includes "printing 100 sheets at a time", "printing one sheet at 100 times", and so on.

When the relay device 30 receives the LT, it analyzes the instruction information of the LT. When it is found that it is the LT in the batch mode, the relay device 30 selects a usage rule interpretable for the relay device 30 in the large-scale usage rules (such as "100 times one printing), And send the LT containing the selected usage rule to the printer 50. Therefore, based on the usage rule and the like contained in the received LT, the printer 50 can print 100 sheets of the content. Note that when all When the use environment information of the SD card 40 is unknown, in the same way as the printer 50, the management device 10 generates a batch mode LT, and the relay device 30 selects a use rule from the batch of rules, and will include The LT of the selected usage rule is sent to the SD card 40. In addition, when the usage environment information of the printer 50 is known and the printer 50 is smarter, the SD card 40 is subjected to the same procedure as described above. The same treatment.

Here, when the printer issues a use request for printing 100 sheets at a time, there are two methods, a method suitable for a relay device with a lower function, and a method of the present invention. The two methods will be explained below by comparison. Fig. 2A is a chart showing the capability of each device included in the system, Fig. 2B is a chart showing a method suitable for a relay device with a lower capability, and Fig. 2C is a chart showing a method according to the present invention A diagram of the approach through the model.

When the printer issues a usage request for printing 100 sheets at a time, the management device that can cut the usage rights multiple times (N times of printing rights, etc.) usually generates an LT containing a usage rule for 100 sheets printing. A terminal device with lower capabilities that processes the usage rules of the LT in the smallest unit (one-time printing right, etc.) interprets the usage rules of the LT, and divides 100 prints at a time into 100 prints at a time, for example, It conforms to its own ability to print one sheet, and sequentially sends 100 LTs including usage rules for printing one sheet at a time to the printer (FIG. 2B). In this case, problems will occur, such as processing load on relay devices and printers, and communication delays.

In contrast, according to the method of the present invention, the management device generates an LT including a usage rule for printing 100 sheets at a time, embeds the instruction information of the pass mode in the generated LT, and then transmits the LT. A terminal device with lower capabilities that processes the usage rules of LT in the smallest unit (one-time printing right, etc.) checks the instruction information (passing mode) of the LT, and passes the LT intact (as it is) LT, without explaining the usage rules for printing 100 sheets at a time (Figure 2C).

Therefore, problems such as the processing load on the relay device (design) and the printer and the communication delay problem can be solved even if the relay device has a lower capacity than the content usage terminal.

Then, when a use request for copying three times at a time is issued to the SD card, there are two methods, a method suitable for a relay device with a lower capability in function, and a method of the present invention. The following explains these two methods by comparing them. Fig. 3A is a chart showing the capability of each device included in the system, Fig. 3B is a chart showing a method suitable for a relay device having a lower capability, and Fig. 3C is a chart showing the basis of this Diagram of the invented batch mode method.

When a use request for three copies is issued to the SD card, a management device capable of cutting multiple use rights (N times copy rights, etc.) usually generates LT including the use rule for three copies. The terminal device that processes the use rule of the LT in the smallest unit (one copy right and one generation) interprets the use rule of the LT, and changes the three copy right use rule to the one and one generation copy right The usage rules of, for example, conform to its own copy once and once generation capabilities, and send to the SD card the changed usage rules including the copy rights for once and once generation (FIG. 3A). In this case, a problem occurs that although the usage rule for three copies is assumed to be obtained, only one copy can be made.

In contrast, according to the method of the present invention, when the use environment information of the SD card is unknown, the management device generates an LT including a batch of multiple usage rules and a piece of instruction information (batch mode). The usage rules are the same in content but different in usage rules as the usage rules for three copies ("one three copies", "three one copies", etc.), and the management device sends the LT to the middle Following the equipment. A terminal device with lower capabilities that processes the usage rules of LT in the smallest unit (one copy right, etc.) looks at the instruction information of the LT (batch mode), and selects one usage rule from the batch of multiple usage rules, Then, the LT containing the selected usage rules (such as "3 copies at a time") is sent to the SD card (Figure 3C).

Therefore, even if the relay device has a lower capability than the content using terminal, when the copyright management method of the terminal device is unknown, the management device also generates a batch of multiple files with the same content but different formats. The LT using rules and instruction information (batch mode). Therefore, even if the relay device 30 selects any rule in the batch of usage rules, the usage rule for three copies can actually be used. That is, the copyright management function of the terminal device can be maximized, so that the problem of making only one copy can be solved.

The following is the functional structure of each device included in the license management system 1.

4 is a block diagram showing the special functional structure of each device shown in FIG. 1, and FIG. 5 is a detailed functional structure showing the SD card 40, printer 50, and relay device 30 shown in FIG. 1 6 is a block diagram showing the detailed functional structure of the management device 10 shown in FIG. 1.

The license management system 1 includes a management device 10, a digital TV 20, a relay device 30, an SD card 40, an SD player 45, a printer 50, and so on. The relay device 30 is a device capable of rebroadcasting a message requesting the use of a content from the SD card 40 and the printer 50 and the LT corresponding to the use request by connecting the SD card 40 and the printer to itself, Furthermore, the relay device 30 distributes the use request, use environment information, and LT via the network 60 by broadcasting and communication.

Note that although the content can correspond to the use request and the LT about the content through a unique identifier for specifying the content, a so-called content ID, the content and the use request or the LT can be managed independently. Moreover, when the LT is transmitted via the broadcast network 60, the management device transmits 10 the LT transmitted in advance without using a request. Also, in the license management system 1, the management device 10 can manage the content, or a content management device located in a location close to or far from the management device 10 can manage the content, thereby accepting all the content. The purchase of the content and the distribution of the content. Also, a terminal device located in a station kiosk or the like can accept the purchase of the content and distribute the recording medium on which the content is recorded, or the recording medium on which the content is recorded It can be distributed as a supplement to a magazine and the content management device can accept the purchase of desired content. Note that since the distribution of the content itself is not the main feature of the present invention, the description of the distributor and the distribution method of the content will be omitted.

The digital TV 20 includes a user interface unit 210, a use environment information management unit 230, a sending and receiving unit 240, and a copyright information processing unit 220.

The user interface unit 210 is a GUI (Graphical User Interface) that accepts a user's operation and displays various types of information on the use of a content such as images, sounds, and data.

The copyright information processing unit 220 is a processing unit that performs use control processing based on the use rules of the LT, such as accepting a use request for the use of the content and holding an LT (or copyright-related information).

The usage environment information management unit 230 (second usage environment information storage unit) is a processing unit for managing usage environment information (first usage environment information) of its own terminal (digital TV 20). When the usage environment information management unit 230 accepts a usage request from the copyright information processing unit 220, it transmits the environment information to the sending and receiving unit 240 together with the usage request or separately. The use environment information of the digital TV 20 specifically includes, as shown in FIG. 7, a content user ID "0×1", the content user ID is a unique identifier given to a content user in the digital TV 20, A terminal ID "0×20", the terminal ID is a unique identifier given to the digital TV 20, a copyright protection function type digital TV 20 (a version of the digital TV 20, a content usage type such as broadcast, mobile and The number of times of that type (such as once) and a reserved area, the reserved area is reserved for storing a usage history, etc.

The sending and receiving unit 240 is a communication interface (second notification unit) that sends a message to the management device 10, such as use environment information and a use request, or receives a message sent from the management device 10. LT.

Note that, in addition to the above, the digital TV 20 actually requires various components, which are used to realize a recognition function for a device recognition and a person recognition, and a protection for the security processing of each function. A tampering function and a power management function, but these components are not the main features of the present invention, so their drawings and descriptions will be omitted.

The SD card 40 includes a copyright information processing unit 410 and a sending and receiving unit 420.

The copyright information processing unit 410 is a unit that performs usage control processing based on LT, and includes a copyright request processing unit 411 and a copyright judgment unit 412.

The copyright information processing unit 410 accepts a use request from the user interface unit 451 of the SD player 45, and sends the use request to the copyright judgment unit 412.

The copyright judgment unit 412 includes a storage unit 4121, and the storage unit 4121 is used to temporarily store an LT received by the sending and receiving unit 420. When the copyright judging unit 412 accepts a use request from the copyright request processing unit 411, it judges whether there is an LT corresponding to the request in the storage unit 4121, and makes the user interface unit 451 The judgment result is displayed. And when the copyright judgment unit accepts an LT from the sending and receiving unit 420, it stores the LT in the storage unit 4121, notifies the user interface unit 451 that the content can be used and lets The user interface unit 451 displays that effect.

The sending and receiving unit 420 is an interface for receiving an assigned LT from the relay device 30.

Note that in addition to the above, the SD card 40 actually requires various components, including a tamper-resistant functional element for the safe handling of each functional element (function) and the As an interface function element between the phonograph 45, since these parts are not the main features of the present invention, their drawings and descriptions will be omitted.

The SD player 45 includes the user interface unit 451.

The user interface unit 451 is a GUI that accepts a user's operation or displays a message when the user uses a content such as image, sound, and data.

Note that in addition to the above, the SD player 45 actually requires various components, including a playback function element for using a content and an interface function element between the SD card 40, but these The components are not the main features of the present invention, so their drawings and descriptions are omitted.

The printer 50 includes a user interface unit 510, a copyright information processing unit 520, and a sending and receiving unit 530.

The user interface unit 510 is a GUI that accepts user operations and displays a message when the user uses a content such as image, sound, or data.

The copyright information processing unit 520 is a unit that performs usage control processing based on LT, and includes a copyright request processing unit 521 and a copyright judgment unit 522.

The copyright request processing unit 521 specifies a unique content ID, which establishes the correspondence between a content that must be requested for use and the LT of the content, and asks whether the copyright request processing unit 521 will communicate with the content ID. An LT corresponding to the use request is stored in the storage unit 5211 of the copyright request processing unit 521, and when the query result is that the corresponding LT is not stored in the storage unit 5211, the use request is sent to the sending and receiving unit 530. request.

The copyright judging unit 522 has the storage unit 5211 for temporarily storing an LT allocated from the sending and receiving unit 530, and the copyright judging unit 522 analyzes the LT, and based on the LT through the The user interface unit 510 notifies the user of the content that the use of the content is permitted.

The sending and receiving unit 530 is a communication interface that sends a use request to the relay device 30 and receives an LT allocated from the relay device 30.

Note that, in addition to the above, the printer actually requires a variety of components, which are used to realize a recognition function for device recognition and a person recognition, a tamper-proof function for the security processing of each function, and a Power management functions, but these components are not the main features of the present invention, so their drawings and descriptions will be omitted.

The relay device 30 includes a user interface unit 310, a device interface processing unit 320, a copyright information processing unit 330, a use environment information management unit 340, a sending and receiving unit 350, and other units.

The user interface unit 310 is a GUI, and the GUI accepts an operation of a user's request for use of a content.

The device interface processing unit 320 is an interface that connects to the SD card 40 or the printer 50, receives a use request from the printer, and sends the LT to the SD card 40 or the printer 50. The device interface processing unit 320 includes a request accepting unit 321, a higher-smart device connecting unit 322, and the higher-smart device connecting unit 322 is used to connect terminal devices with higher intelligence than the relay device 30, And a lower-intelligence device connection unit 323, which is used to connect terminal devices with the same intelligence as the relay device 30 or lower intelligence than the relay device 30.

The request accepting unit 321 accepts a use request from the terminal device (printer 50) or the user interface unit 310.

The higher intelligent device connection unit 322 allocates a pass mode LT to the terminal device (such as the SD card 40).

The lower smart device connection unit 323 allocates a standard mode LT or a batch mode LT to the terminal device (such as the printer 50).

The copyright information processing unit 330 is a unit for accepting a use request via the device interface processing unit 320 or after processing the LT allocated from the management device 10 based on its control mode, and then via the device The interface processing unit 320 allocates the LT to the destination device. The copyright information processing unit 330 includes a copyright request processing unit 331, a copyright storage processing unit 332, a copyright processing mode judgment unit 333, and a decryption unit 334. (Second decryption unit), a copyright information conversion unit 335, and others.

The copyright request processing unit 331 analyzes the content of the use request accepted by the request accepting unit 321. And when the result of the analysis is that the use request can be analyzed normally, the copyright request processing unit 331 transmits the analyzed use request to the copyright storage processing unit 332 to confirm whether it has been received and received from the copyright request processing unit 332. The LT corresponding to the use request of the management device 10. When the use request is abnormal, the copyright request processing unit 331 invalidates the use request and notifies the request unit that it rejects the use request.

The copyright storage processing unit 332 has a storage unit 3321 for storing unpurchased LT among the LTs distributed from the sending and receiving unit 350 (the content has not been distributed but only the LT has been distributed in advance) And the purchased LT (both content and LT have been distributed, and the content can be used freely), when there is no corresponding use request transmitted from the copyright request processing unit 331 in the storage unit 3321 In the case of LT, the copyright storage processing unit 332 sends a use request to the use environment information management unit 340. In addition, when the LT corresponding to the use request is stored in the storage unit 3321, the copyright storage processing unit 332 transmits the LT allocated from the sending and receiving unit 350 to the copyright processing mode Judgment unit 333.

Note that an unpurchased LT is stored in the storage unit 3321 because it is considered that the broadcast of one-way communication is used as a network and the LT is sometimes received at an earlier time than a content itself in the broadcast. . This is processing in the case where only the LT corresponding to the purchased content is received, because when a two-way communication is used as a network, the LT is usually distributed after the content is purchased. Therefore, in a normal situation, the LT is not stored in the storage unit 3321, but it is stored there after the LT including a free use rule is decrypted and re-encrypted.

The copyright processing mode judgment unit 333 refers to a control mode that is a parameter in the LT, and when it is a pass-through mode, even if the rights information is encrypted in a black box area 823 (FIG. 16), The copyright processing mode judgment unit 333 also sends the LT to the higher intelligent device connection unit 322 intact. When the control mode as a parameter in the LT is a standard mode or a batch mode, the copyright processing mode judgment unit 333 sends the LT to the decryption unit 334.

The decryption unit 334 decrypts the encrypted standard mode or batch mode LT, and sends the decrypted LT to the copyright information conversion unit 335.

When the control mode is the standard mode, the copyright information conversion unit 335 allocates the standard mode LT to the SD card 40 or the printer via the lower smart device connection unit 323. When the control mode is the batch mode, the copyright information conversion unit 335 selects a format that can be analyzed in the printer 50 among a plurality of usage rules (bulk area 824 in FIG. 17). One usage rule (right information), and the LT including only a selected usage rule is allocated to the printer 50 via the lower intelligent device connection unit 323. Note that when the decrypted LT includes a free use rule, the copyright information conversion unit 335 only re-encrypts the free use rule, and then makes the storage unit 3321 store the rule in itself In order to reuse the right in the copyright storage processing unit 332. In other situations, the LT is invalidated by the relay device 30.

The use environment information management unit 340 is a processing unit (first use environment information storage unit) that is used to manage the environment use information (second use environment information) of the relay device 30 itself and connect to the relay device The use environment information (first use environment information) of the terminal device (such as the SD card 40 and the printer) of 30. When the usage environment information management unit 340 receives a usage request from the copyright storage processing unit 332, it transmits the usage environment information and the usage request to the sending and receiving unit 350 together or separately.

The use environment information of the relay device itself managed in the use environment information management unit 340 specifically includes the following, as shown in FIG. 8: a content user ID (when the relay device 30 uses the content, it is "0×2, when it rebroadcasts the content, it is "- (empty)), the content user ID is a unique identifier and a terminal ID ("0×30) given to the content user. The terminal ID is a unique identifier given to the relay device 30, a type of copyright protection function (the version of the relay device 30, a content usage type, such as playing and moving, the number of times of that type, such as once) And a reserved space, which is an area reserved for storing usage history and the like. The usage environment information of the SD card 40 includes content user ID ("0×3"), terminal ID ("0×40"), copyright protection type (version, usage type, such as playing and moving, number of times (may be more) Times)), and reserve space. In addition, the usage environment information of the printer 50 includes content user ID ("0×4"), terminal ID ("0×50"), copyright protection type (version, usage type, such as printing, number of times (maybe multiple times) ), and reserve space. Note that when the copyright information function type of the SD card 40 or the printer 50 is not acquired or cannot be understood, it will be unknown. In addition, in the process of connecting these units, in response to an inquiry from the relay device 30, the copyright information type of the SD card 40 or the printer 50 is obtained and saved in advance. Moreover, when the SD card 40 or the printer 50 includes a usage environment information management unit that manages its own usage environment information and a sending unit that transmits the usage environment information, the usage environment information management unit 340 may save data from the The use environment information sent by the SD card 40 or the printer 50.

The sending and receiving unit 350 is a communication interface (first notification unit) that notifies the management device 10 of use environment information, a use request, and a message including a mixture of these information and requests via the network 60, And receive a content usage rule (LT) distributed by the management device 10 via the network 60.

Note that, in addition to the above, the relay device 30 actually requires a variety of components, which are used to realize a recognition function for device recognition and a person recognition, and a tamper-proof function for the security processing of each function. , And a power management function, but these components are not the main features of the present invention, so their drawings and descriptions will be omitted.

The management device 10 includes a sending and receiving unit 110, a copyright information management unit 120, and a copyright information conversion unit 130. The copyright information management unit 120 includes a use request analysis unit 121, a use environment information analysis unit 122, a copyright information generation unit 123, a copyright-related information database 124, an encryption unit 125, and the like. Note that since the copyright information conversion unit 130 has been described above, its description will be omitted.

The sending and receiving unit 110 is a communication interface that receives a use request or a message of use environment information from the digital TV 20 and the relay device 30 connecting the SD card 40 or the printer 50 to itself, And based on the use environment information, the unconverted or converted copyright-related information (LT) corresponding to the use request is allocated to the digital TV 20 or the relay device 30.

The copyright information management unit 120 is a unit that is used to manage a content, such as image, sound, and data usage rules, and copyright-related information, such as an encryption/decryption key. The copyright information management unit 120 includes copyright-related information. The information database 124, the use request analysis unit 121, the use environment information analysis unit 122, the copyright information generation unit 123, the encryption unit 125, and so on.

The copyright-related information database 124 manages a terminal ID, a user ID, a content ID, a content key, a preview key, and each user managed by the management device 10 by defining the corresponding relationship between them. One of the rules of use and so on.

The use request analysis unit 121 analyzes whether the message (telegram message) received by the digital TV 20 or the relay device 30 is use environment information, a use request, or both.

FIG. 9 is a diagram showing a format structure of the above-mentioned messages (such as use environment information and use request).

The message 70 (notification of usage environment information) is used to notify the usage request and usage environment information such as the type of terminal device represented by the terminal ID, such as the digital TV 20, the relay device 30, the SD card 40, and the printer 50, And the copyright-related information processing function represented by the type of copyright protection function (a version, a type of use, and the number of times (one or more times) of each type). The message 70 includes a header 71 that is not encrypted. A payload 72 and a trailer 73 are encrypted.

The header 71 includes a version 711, a length 712, a telegram 713, a ciphertext type 714, etc. and their respective parameters.

The parameters of the version 711 are suitable for future expansion and improvement of the usage request and usage environment information notification, and the newer the parameter, the larger the number represented by it. For example, the parameters are represented by the numbers "0" to "255".

The length parameter 712 represents the total length of the area to be encrypted of the variable length (the payload 72 and the trailer 73), and provides a size identification for encryption/decryption.

The parameter of the telegram ID 713 indicates whether to store only the usage environment notification information in the usage environment information 70 or to store both the usage environment notification and the usage request there. When only the information notified by the usage environment is stored, the value "0x0010" is stored, and when both pieces of information are stored there, the value "0x0030" is stored.

The parameter of the ciphertext type 714 indicates whether the area (payload 72 and trailer 73) to be encrypted is encrypted, and the encryption type when being encrypted. When it is not encrypted, the value "0" is stored, and when it is encrypted, the value corresponding to the encryption type "1" to "255" is stored.

The payload 72 includes a usage environment information number 721, a usage environment information length 722, a usage environment information 723, a content ID 724, a usage request 725, etc., and their respective parameters.

The parameter of the usage environment information number 721 is a numerical value "0" to "65535" represented by a mixture of the usage environment information length 722 and the number of usage environment information 723. When "0x0030" indicating that both the use environment information and the use request are stored is stored in the telegram ID 713, and when "0" is stored in the use environment information number 721, this means that the message is only a use request. Therefore, the telegram can transmit the message in three patterns: only use environmental information, only use request, and use both environmental information and use request.

The usage environment information length 722 is the length of the usage environment information 723 expressed in bytes.

The parameters of the usage environment information 723 include the above-mentioned parameters of the content user ID 7231, the terminal ID 7232, the copyright protection function type 7233, the reserved space 7234, and the like.

Regarding the use environment information when a use request in the SD card 40 is notified, the use environment information of the SD card 40 is first saved, and then the use environment information of the relay device is saved, As shown in Figure 10A. In addition, regarding the use environment information in the case where the printer 50 notifies a use request, first save the use environment information of the printer 50, and then save the use environment information of the relay device 30, as shown in FIG. 10B . Therefore, when there are multiple relay devices, it is possible to know exactly in what order the terminal device as a request source is connected to the relay device.

The parameter of the usage environment information length 722 is the length of the usage environment information 723 expressed in bytes.

The content ID 724 represents a unique identifier for specifically indicating a content subject to a use request.

The use request 725 is a link of the required 2-byte parts (pieces), the 2-byte part includes a higher number of single-byte descriptors, the number of descriptors represents a use type (action type), such as Play, move, copy, print and modify, and a lower single byte of permission for one right per action (unused: Never=0, once used: Once=1, free use: Free=2).

The tail 73 includes a parameter of an operation detection 731 that stores a hash value for the header 71 and the payload 72 obtained by being encrypted by a SHA-1 or the like.

The use environment information analysis unit 122 analyzes the use environment information of the digital TV 20, the terminal device (SD card 40 or printer 50), and the relay device 30, and compares the use environment information of each device, or determines the information that will be embedded in an LT Command information (control mode). More specifically, when the copyright information processing capability of the SD card 40 or the printer 50 is more intelligent than the copyright information processing capability of the relay device 30, that is, when the terminal device connected to the relay device 30 can execute For processing with higher functionality, for example, when the version of the SD card 40 or the printer 50 is higher than that of the relay device 30 (the version number is larger), or the SD card 40 or the printer 50 When the number of uses supported by the relay device 30 is greater than the number of uses supported by the relay device 30, the use environment information analysis unit 122 designates the control mode as a pass-through mode. When the use environment is unknown, that is, more specifically, the management device 10 cannot obtain the use environment information (version, use type, and information about each type of terminal device connected to the relay device 30). Use times), the use environment information analysis unit 122 determines that the control mode is a batch mode. In other cases, that is, when the relay device 30 and its terminal devices are equivalent to each other or the relay device 30 is more intelligent, the use environment information analysis unit 122 considers this to be a standard operation and specifies the control The mode is a standard mode.

The use environment information analysis unit 122 instructs the copyright information generating unit 123 to execute the determined control mode, and requests it to generate an LT according to the instruction.

In response to the instruction of the use environment information analysis unit 122, the copyright information generating unit 123 cooperates with the copyright information conversion unit 130 to generate a format suitable for the control mode (standard mode, pass mode, or batch mode). LT.

The encryption unit 125 encrypts the LT generated by the copyright information generating unit 123 for preventing illegal use. Note that in the pass-through mode, it encrypts the LT with its own encryption method defined under the copyright protection function of the terminal device.

Note that, in addition to the above, the management device 10 actually requires a variety of components. These components are used to realize the recognition function of a device recognition and a person recognition, the tamper-proof function of the security processing of each function, and include a LTs purchase settlement management function, the function of registering and changing usage rules by an author or a content owner, and the energy management function. However, since these components are not the main features of the present invention, their drawings and reference to them will be omitted. instruction of.

FIG. 11 is a diagram showing the format structure of the LT in the standard mode, the LT being distributed from the management device 10.

An LT80 includes an unencrypted header 81, an encrypted payload 82, and an encrypted trailer 83.

The header 81 includes a version 811, a length 812, a control mode 813, a ciphertext type 814, a storable period 815, a content ID 816, and so on.

The parameters of the version 811 include a main area (a higher single byte used for format changes) and a primary area (a lower single byte used for the increase of the descriptor), which are used for the future of the LT Extensions and improvements.

The length parameter 812 is used to identify the size of encryption and decryption, and the length parameter 812 represents the entire length of the area of the LT (payload 82 and trailer 83) to be encrypted.

The control mode 813 indicates how to process the LT in the terminal device so as to be suitable for multiple copyright management systems, and "1" is stored in the standard mode. "0" and "2" are stored in the pass mode and batch mode, respectively. Moreover, the payload in FIG. 11 is in a format in the standard mode ("1").

The parameter of cipher type 814 is used to judge the cipher type, and the parameter of cipher type 814 stores the cipher text type of the payload of the LT (non-cipher=0, cipher=1~255) ).

The parameters of the storable period 815 are used to manage the storable period of the LT. The parameters of the storable period 815 use BCD (two-decimal) and MJD (modified Julian date) in year, month, day, hour, minute and second. Indicates the storable period (a relative period or an absolute period) of the LT. After the "purchase time + relative period" or "absolute period" elapses, the LT is invalidated. Note that the purchase time is obtained from other information, not the LT.

The parameter of the content ID 816 is a unique identifier for specifying the use of a content.

The payload 82 includes a usage rule ID 821 and a descriptor area 822.

The parameter of the usage rule ID 821 is a unique identifier for specifying a usage rule, and the parameter of the usage rule ID 821 is used to double the function of an encrypted random number area, and can also be used to prevent illegal copying.

The parameters of the descriptor area 822 include a content key descriptor 8221. The content key descriptor 8221 includes a content ciphertext type and a preview key descriptor 8222. The preview key descriptor 8222 includes a preview ciphertext type. An action descriptor 8223, the action descriptor 8223 is a variable length descriptor, various rights (actions) corresponding to the content attribute can be added to or deleted from the variable length .

FIG. 12 is a diagram showing a format structure of the content key descriptor 8221 shown in FIG. 11.

As shown in the figure, the content key descriptor 8221 includes a basic area, which includes a descriptor number 82211, a descriptor length 82212, a content ciphertext type 82213, and a content key 82214, etc. And other parameters.

The parameter of the descriptor number 82211 stores "0" to indicate that the descriptor type is a content key descriptor.

The parameter of the descriptor length 82212 stores "0" to "65535" to indicate the length of the descriptor 8221. The length of the content key is calculated from the descriptor length 82212.

The parameter of the content cipher type 82213 stores the encryption type of the content and so on (0: non-cipher, 1 to 255: cipher password).

The parameter of the content key 82214 stores a variable-length key used to decrypt the encrypted content.

FIG. 13 is a diagram showing the format structure of the preview key descriptor 8222 shown in FIG. 11.

As shown in the figure, the preview key descriptor 8222 includes a basic area, the basic area includes a descriptor number 82221, a descriptor length 82222, a preview ciphertext type 82223, a preview key 82224, etc. Parameters.

The parameter of the descriptor number 82221 stores "1" to indicate that the descriptor type is a preview key descriptor.

The parameter of the descriptor length 82222 stores "0" to "65535" to indicate the length of the descriptor 8222. The length of the preview key is calculated from the descriptor length 82222.

The parameter of the preview ciphertext type 82223 stores the ciphertext type of the preview content, etc. (0: non-cipher without password, 1 to 255: cipher with password).

The parameter of the preview key 82224 stores a variable-length key used to decrypt the encrypted preview content.

FIG. 14 is a diagram showing a format structure of the action descriptor 8223 shown in FIG. 11.

As shown in the figure, the action descriptor 8223 includes a required basic area 82231 and a selection area 82232. The basic area includes a descriptor number 822311, a descriptor length 822312, and a right license 822313, if necessary In this case, the selection area 82232 is added to the predetermined usage rule, and the selection area 82232 includes a minimum continuous use duration 822321, a maximum continuous use duration 822322, and a quality limit 822323.

The parameter of the descriptor number 822311 stores a digital value corresponding to an action type. Specifically, "store "2", "3", "4", "5" and "6" for a playback right descriptor, a movement right descriptor, a copy right descriptor, a printing right descriptor, and A modification right descriptor. Note that "7" ~ "255" are reserved for other actions.

The parameter of the descriptor length 822312 stores "0" to "65535" to indicate the length of the descriptor 8223.

The parameter storage of the right permission 822313 "Never=0×0", "Can be used once" (Once=0×1), "Can be used multiple times as specified" ("(0×2(Two Times) ~ "0 × FFFFFFFD (4294967293 times"), "unlimited times", that is, "free to use" (Free = 0 × FFFFFFFF), and "inquiry about the management device 10 and can be used after cutting from the right to use The minimum time of "", that is, "one time" (Ask = 0 × FFFFFFFF).

The minimum continuous use duration 822321 can be set to be used only for the right to play. The minimum continuous use duration 822321 uses the year, month, day, hour, minute, and second specified by the BCD and MJD to indicate the time from the start of use The calculated duration of time for a piece of content to be used, and the duration of time is judged to be one use of the content. For example, when the minimum continuous use duration for three minutes of music is designated as 30 seconds, when 30 seconds have passed since the start of playback, it is counted as one use time.

The maximum continuous use duration 822322 can be set to be used only for the right to play. The maximum continuous use duration 822322 uses the year, month, day, hour, minute, and second specified by BCD and MD to indicate the beginning of the playback. The maximum length of time that the content can be used continuously. For example, even when the content is a one-hour-long movie and for some reason, such as going to the bathroom, you must suspend (pause) its playback, usually it can be set to be longer than one hour (such as 3 hours), but When 3 hours have passed from the start of the playback, the playback of the content is suspended.

The parameter of the quality limit 822323 can be set to one of the right to play, the right to copy, or the right to print. In the quality limit 822323, the quality of the content, such as the intensity level of black and white, the clarity level of color (standard or high), and so on.

The tailer 83 includes parameters of the operation detection 831, and the operation detection 831 stores a hash value for the header 81 and the payload 82 obtained by being encrypted by a SHA-1 or the like.

Note that the content and size of each parameter included in the LT are shown only as an example, and therefore they are not limited to these descriptions.

Here, FIG. 15 is used to explain the relationship between the effective period 815 shown in FIG. 11 and the minimum continuous use duration 822321 or the maximum continuous use duration 822322 shown in FIG. 14.

For example, when you find a piece of content you want to watch in a bill of fare, you receive the distribution of the content at the time arranged by the bill and store it in a storage unit such as a hard disk. Then, you go through a program for purchasing the right to view the content, and receive the distribution of the LT after the use request. When the LT is allocated, the timing of the storable period of the LT is started. When the playback of the content starts, the timing of the minimum continuous use duration and the maximum continuous use duration starts. And when the minimum continuous use duration has passed, it is judged as one use. During the continuous playback of the content (including a pause during playback), you can watch the content until the maximum continuous use duration or the duration to the end of the storable period of the LT, whichever is the shortest Has passed, even if the minimum continuous use duration has passed. After the minimum continuous use duration has elapsed, the maximum continuous use duration or the shortest duration to the end of the storable period of the LT elapses, the one-time use rule is invalidated, and if If there are no remaining usage rules, the LT is invalidated. Such highly accurate time management can be used not only in the standard mode but also in the pass mode and batch mode.

Therefore, when the time management of the storage medium or the printer is more accurate than the time management of the relay device, it is possible to obtain an effect of preventing the management time information from being broken by the lower performance relay device. Lower accuracy.

Fig. 16 is a diagram showing the format structure of LT in a pass mode.

Note that the same numeric code is pasted to the area corresponding to the area of LT in the standard mode, so their description is omitted.

In the LT of the pass-through mode, instruction information (0=pass-through mode) is embedded in the control mode 813, and a black box area 823 is stored instead of the descriptor area 822. The black box area 823 stores a content control information (play/move/copy/print/modify/...), a use rule (N times of use right), a valid start time, a valid end time, etc. The control information of is set by the copyright information conversion unit 130 based on the use environment information of the terminal device and according to the copyright protection system determined by the terminal device such as a storage medium, a printer, and the like. Moreover, the copyright information conversion unit 130 can set the above-mentioned minimum continuous use duration and maximum continuous use duration. In addition, it can freely set various parameters according to the copyright protection system. These parameters and other parameters are stored in the black box area 823.

The black box area 823 is regarded as a sealed black box area in the relay device and will never be explained.

Fig. 17 is a diagram showing the format structure of LT in batch mode.

Note that the same numeric code is pasted to the area corresponding to the area of LT in the standard mode, so their description is omitted.

In the LT of the batch mode, instruction information (2=batch mode) is embedded in the control mode 813, and a batch area 824 instead of the descriptor area 822 is stored. The batch area 824 stores a plurality of control information (play/move/delete/print/modify/...) and usage rules of a content (a content key, preview key, number of times, etc.). The copyright information conversion unit 130 is set up according to a copyright protection system determined by terminal devices such as storage media, etc., which use various usage methods (formats) but have the same content. In addition, the copyright information conversion unit 130 can set the above-mentioned minimum continuous use duration and maximum continuous use duration. In addition, it can freely set various parameters according to the copyright protection system, and these parameters and other parameters can be set. It is stored in the batch area 824.

The relay device determines a processable format among the multiple formats stored in the batch area 824 and selects the first one to be found. Other usage rules that have not been selected are invalidated.

Note that the content and size of each parameter included in the LT are only examples, and therefore they are not limited to these descriptions.

In addition, the present invention includes such a variation that the contents of the parameters contained in FIGS. 16 and 17 are distributed in the pass mode or batch mode in other formats than the usage rule format shown in these figures. .

Furthermore, the present invention includes such a variation that the format of the copyright-related information stored and managed in the management device 10 is distributed intact and converted into a format that can be used in the relay device The format for processing the copyright information of the SD card 40 or the printer 50 in the device interface processing unit 320 of 30.

FIG. 18 is a diagram showing the format structure of the use rejection notice 90 which is distributed from the management device 10 or the relay device 30.

The usage rejection notice 90 includes a header 91 that will not be encrypted, a payload 92 that will be encrypted, and a tail 93 that will be encrypted.

The header 91 includes a version 911, a length 912, a telegram ID 913, and a cipher text type 914.

The version 911 is used to notify future extensions and improvements of a use request and a use rejection of the use environment information notification, and stores the values "0" to "255".

The length 912 is used to identify the size of encryption/decryption, and represents the entire length of a variable encryption area.

The telegram 913 indicates that a telegram is a use rejection notice, etc., and stores "0×1030" and "0×1000" for use rejection notice and rejection flag, respectively.

The cipher text type 914 is used to determine the cipher text type and the cipher text type that represents the cipher text area of the telegram (no password=0, password=1 to 255).

The payload 92 represents a content ID 921 and an error code 922.

The content ID 921 is a unique identifier for specifying a content, and corresponds to a content ID used for the use request.

The error code 922 clearly indicates a reason for rejection, and stores "0×0", "0×1", "0×2", "0×3" and "0×4" for no contract, no Purchase, inability to use due to age or region, unsupported version, timeout due to device failure, etc.

The tail 93 stores an operation detection 931 for detection operation, and the operation detection 931 stores a hash value for the header 91 and the payload 92 obtained through a SHA-1 or the like.

Note that the content and size of each parameter included in the descriptors shown in FIGS. 12, 13, and 14 are only examples, and therefore they are not limited to the above description.

In addition, the data format described in Figures 11, 12, 13, 14, 16 and 17 assumes that the data is binary, but text data such as an XML (Extensible Markup Language) or digital watermark can also be distributed in the same way. The way is realized.

Next, the processing in each device will be explained in turn.

FIG. 19 is a flowchart showing the processing of the printer 50 and the like.

Due to the processing of the digital TV 20, the processing of the relay device 30 in the case of using a content by itself, and the processing of the SD player with the SD card 40 inserted therein are substantially the same as the processing of the printer 50. Therefore, the processing of the printer 50 will be described as a typical example.

First, a user of a content connects the printer 50 to the relay device 30.

The user interface unit 510 waits for various requests from the user, and transmits these requests to the copyright request processing unit 521 of the copyright information processing unit 520 when the request is a use request (Yes in S501). This use request corresponds to a print request for acquiring, for example, LT having a printing right of 100 sheets as shown in FIG. 1. The copyright request processing unit 521 specifies the content ID of the content, and the content is subject to the use request transmitted by the user interface 510 (S502), and the copyright request processing unit 521 inquires the copyright judgment unit 522 The storage unit 5221 does it obtain (save) the LT corresponding to the content ID (step S503).

When the result of the inquiry is that the storage unit 5221 of the copyright judging unit 522 does not obtain the LT (Yes in S503), the copyright request processing unit 521 generates an application in a format of the use environment information 70 In response to the use request (use environment information number = 0) message, the sending and receiving unit 530 sends the generated use request message to the relay device (S504). And the transmitting and receiving unit 530 waits for the LT allocated from the relay device 30 for a predetermined time.

When the transmitting and receiving unit 530 receives the LT of the content distributed from the relay device 30 within a predetermined time (No at S509, Yes at S505), it transmits the received LT to The copyright judgment unit 522 in the copyright information processing unit 520, and the copyright judgment unit 522 stores the transmitted LT in the storage unit 5221, and then analyzes the content of the LT (such as a usage rule) (S506).

Based on the obtained LT usage rule, the copyright judgment unit 522 notifies the content user via the user interface unit 510 that the usage license is granted, that is, the user can use the content (S507).

Therefore, the license processing for the use of the content is completed, and the user can use the content within the restriction range of the usage rule (100 prints).

When there is no response from the relay device 30 after the predetermined time has passed since the reservation request is made (No in S505, Yes in S509), the sending and receiving unit 530 presses the timeout In processing, the user interface unit 510 uses the format of the use rejection notice 90 to notify the user that he/she cannot use the content (S510).

On the other hand, when the storage unit 5221 of the copyright judgment unit 522 obtains the LT corresponding to the use request in step S503 (Yes in S503), the copyright request processing unit 521 transmits the use request Instead of sending a use request to the relay device 30, the copyright judgment unit 522 is sent. The copyright judgment unit 522 receiving the use request notifies the user that he/she can use the content via the user interface unit 510 (S507).

And when there is no request from the content user to suspend the service (No in S508), the user interface unit 510 waits for a predetermined use request of the content from the user and continues the Processing, and when there is a request from the content user to suspend the service (Yes in S508), the content use service ends.

By repeating the process, the desired LT can be obtained. In using the content, the user decrypts the encrypted content with the decrypted content key by using the first decryption unit or decrypts the encrypted preview content with the decrypted preview key after the encrypted LT is decrypted. Use the content within the limits of the usage rules. And when the user exceeds the restriction of the usage rule, the copyright judgment unit 522 invalidates the LT.

Note that when the digital TV 20 issues a content use request or the relay device itself uses a content, each unit of the digital TV 20 and the relay device 30 performs substantially the same operation as the printer 50. However, the digital TV 20 and the relay device 30 also include use environment information management units 230, 340, so they are different from the printer 50 in that they combine the use environment information with the use request in step S504 or separately. Send it locally, as shown in Figure 19.

The processing in the SD player 45 in which the SD card 40 is inserted is the same as that of the printer 50, and in the SD player 45, the use request is transmitted from the SD card 40 to the relay device 30 or the LT It is wirelessly transmitted from the relay device 30 to the SD card 40.

Next, the use request acceptance processing of the terminal device (SD card 40 and printer 50) executed in the relay device 30 will be explained.

FIG. 20 is a flowchart showing the terminal device use request acceptance process executed in the relay device 30.

For the SD card 40, by connecting the SD card 40 to the relay device 30, the relay device 30 can replace the SD card 40 to perform use request acceptance processing. Therefore, regarding the acceptance of the use request from the SD card 40 to the relay device 30, the acceptance process in the case where the SD card 40 is connected to the relay device 30 will be explained here.

When a user uses a content through the SD card 40, he/she first connects the SD card 40 to the device interface processing unit 320 of the relay device 30. Then he/she inputs a usage request by operating the user interface unit 310. The use request corresponds to the request for the right to play for 3 times on the SD memory card connected to the relay device 30 as shown in FIG. 1. The use request is transmitted from the user interface unit 310 to the device interface processing unit 320. Note that the use request from the printer 50 is transmitted to the device interface processing unit 320.

When the request acceptance unit 321 in the device interface processing unit 320 directly receives a use request from the printer 50 via the user interface unit 310 (Yes in S301), it sends the request to the copyright The copyright request processing unit 331 of the information processing unit 330. The copyright request processing unit 331 analyzes the received use request (S302), and judges whether the use request is normal (S303).

When the use request is normally analyzable (Yes in S303), the copyright request processing unit 331 transmits the analyzed use request to the copyright storage processing unit 332 to verify that it corresponds to the use request The LT of is obtained (saved) in the storage unit 3321 of the copyright storage processing unit 332.

When the LT corresponding to the use request cannot be obtained in the storage unit 3321 (Yes in S304), the copyright storage processing unit 332 transmits the use request to the use environment information management unit 340.

The usage environment information management unit 340 sends out a message storing the usage request and usage environment information, and sends the message to the sending and receiving unit 350. The sending and receiving unit 350 sends the received message storing the use environment information and the use request to the management device 10 via the network 60 (S305). The sending and receiving unit 350 waits for the arrival of the LT from the management device 10 within a predetermined time (No in S306, No in S313).

The use environment information management unit 340 manages the use environment information of its own terminal and the use environment information of the printer 50 and the SD card 40 connected to its own terminal. For the use request of the SD card 40, the use environment information management unit 340 stores the use environment information of the SD card 40 in the message (a content user ID "0×3", a terminal ID "0×4"). ", a copyright protection function type (a version, playback (maybe multiple times), mobile) and reserved space (a use history, etc.)) and its own terminal use environment information (a content user ID "-", A terminal ID "0×30", a copyright protection function type (a version, play (once), mobile), and reserved space (a user history, etc.).

For the use request from the printer 50, the use environment information management unit 340 stores the use environment information of the printer 50 in the message (a content user ID "0x4", a terminal ID "0x50", A copyright protection function type (unknown) and reserved space (a use history, etc.)) and its own terminal usage environment information.

When the sending and receiving unit 350 receives the LT within a predetermined time (No in S313, Yes in S306), it transmits the received LT to the copyright storage processing unit 332.

The copyright storage processing unit 332 judges whether the received LT corresponds to the use request from the terminal device, that is, it is not purchased (S307a). When the LT is not purchased (Yes in S307a), the copyright storage processing unit 332 stores the LT in the storage unit 3321 (S307b). When the usage rule (LT) is already purchased (No in S307a), the copyright storage processing unit 332 immediately executes the control mode judgment processing (S308).

The processing (S307a, S307b) is provided under the assumption that the LT is distributed to the relay device earlier than the content itself by using a one-way broadcast as a network. When the LT is allocated to the relay device 30 in advance, the LT can be allocated to the user terminal device from the relay device 30 without having to have a terminal device from the user. The use request is immediately transmitted to the management device 10, and the user has completed the process, such as the purchase of a content license.

When a high-speed two-way communication is used as a network, the LT is usually distributed after the content is purchased, and the process of receiving only the LT corresponding to the purchased content is described here. Therefore, the LT is usually not stored, but the LT for free use is decrypted and re-encrypted, and then stored.

In the control mode judgment processing of step S308, by referring to the control mode, the control mode is a parameter of the LT, and the copyright processing mode judgment unit 333 determines whether the control mode is a pass mode, a standard mode or A batch mode.

When the control mode is the pass-through mode, the copyright processing mode judgment unit 333 allocates the LT to the higher smart device connection unit 322, and the higher smart device connection unit 322 allocates the LT to the terminal Device (SD card 40 or printer 50) (S310). In other words, the copyright processing mode judgment unit 333 allocates the LT as it is without performing any processing on it, even when the rights information in the black box area 823 of the LT as shown in FIG. 16 is encrypted .

When the control mode is the standard mode, the copyright storage processing unit 332 transmits the LT to the decryption unit 334. The decryption unit 334 decrypts the encrypted LT (payload 82 and trailer 83) and transmits it to the copyright information conversion unit 335. The copyright information conversion unit 335 distributes the decrypted LT to the terminal device (SD card 40 or printer 50) connected to itself via the lower smart device connection unit 323 according to each format as shown in FIGS. 11-14 (S309 ).

Note that after allocating the LT, the copyright information conversion unit 335 refers to the right license of the decrypted usage rule (LT), and judges whether the free usage rule is included. When the free use rule is included, the copyright information conversion unit 335 only re-encrypts the free use rule and causes the storage unit 3321 of the copyright storage processing unit 332 to store it in order to reuse the copyright information in the copyright storage processing unit 332. right. In other cases, the copyright information conversion unit 335 invalidates the remaining LT.

When the control mode is the batch mode, the processing mode of the copyright of formula judging unit 333 transmits the LT batch mode to the decryption unit 334. The decryption unit 334 decrypts the encrypted LT (payload 82 and trailer 83), and the copyright information conversion unit 335 selects copyright information in one or more formats in the batch area as shown in FIG. A format-use rule that can be analyzed in the printer 50 connected to the relay device 30, re-encrypt the LT including the selected right information, and then transmit it to the lower smart device connection unit 323, And it is allocated to the terminal device (printer 50) (S311). In this case, the LT is allocated according to the format shown in FIG. 17.

Note that when there are some abnormalities in the use request received from the SD card 40 or the printer 50 (No in S303), the copyright request processing unit 331 invalidates the abnormal use request and rejects it Notify the requesting device and wait for a request (S312, S301).

In addition, when the copyright storage processing unit 332 has stored the LT corresponding to the use request (No at S304), it transmits the stored (unpurchased LT for free use) LT to the copyright The processing mode determination unit 333, and the copyright processing mode determination unit 333 determine the control mode (S308).

On the other hand, when there is no response after a predetermined time has elapsed since the use request issued by the relay device 30 (Yes at S313), the copyright storage processing unit 332 notifies the printer 50 via the device interface processing unit 320 of the LT is not usable, as in the over processing in the transmitting and receiving unit 350 (S314). In this case, according to the format shown in FIG. 18, a rejection code is set for a usage rejection notification, which indicates that the usage is rejected due to timeout.

When there is no service termination request from the content user (No in S312), the use acceptance unit 321 waits for a use request for a predetermined content from the content user. When there is a service end request from the content user (Yes in step S312), the content use service ends.

By repeating this process, the use request from the terminal device is accepted and responded, and therefore the LT having a pattern suitable for the terminal device can be allocated.

21 and 22 are flowcharts showing the flow of processing of the management device 10.

When the transmitting and receiving unit 110 of the management device 10 receives a message including a use request in the format shown in FIG. 18 via the network 60 (Yes in S101), the use request analyzing unit 121 analyzes the The use request is described (S102). When the message does not include the use request in step S101, the message is invalidated.

After analyzing the use request, it is determined whether the above message includes use environment information (S103). When the message includes use environment information (Yes in S103), the control mode of the LT generated based on the analysis result of the use environment information is determined (S104). Note that when the message does not include use environment information in step S103, the message is invalidated.

FIG. 22 is a flowchart showing the details of the control mode judgment processing (S104) shown in FIG. 21.

As shown in this figure, the use environment information analysis unit 122 first analyzes whether the use environment information is one or more, that is, whether the use environment information is only a device connected to the network 60 (digital TV 20 or medium). Follow the use environment information of the device 30) (S1041). When the information is one (Yes in S1041), the use environment information analysis unit 122 determines that the generated control mode of the LT is the standard mode (S1042). When the use environment information is two or more (No in S1041), the use environment information analysis unit 122 determines that the device (SD card 40 or printer 50) connected to the relay device 30 is Whether the copyright protection function type 7233 (see FIG. 9) of the use environment information is unknown (S1043). Especially when the relay device 30 cannot obtain the information corresponding to the copyright protection function type 7233 or when the management device 10 cannot understand the information, even if the relay device 30 obtains it, This "unknown" state occurs.

When the copyright protection function type 7233 is unknown (Yes in S1043), the use environment information analysis unit 122 determines that the control mode of the generated LT is the batch mode (S1044).

When it is unknown (No in S1043), the use environment information analysis unit 122 compares the use environment information between the use environment information of the relay device 30 and the use environment information of the device connected to the relay device 30. The processing capacity of the LT (S1045).

When the relay device 30 and the device connected to the relay device 30 have comparable processing LT capabilities or have higher processing LT capabilities than the device connected to the relay device 30, the use environment information analysis unit 122 determines the LT to be generated The control mode is the standard mode.

On the other hand, when the relay device 30 has a lower capability than the device connected to the relay device 30, the use environment information analysis unit 122 determines that the control mode of the LT to be generated is the pass-through mode (S1048). In other words, when the copyright information processing function of the terminal device (SD card 40 or printer 50) is more intelligent than the copyright information processing function of the relay device 30, or, more specifically, when the usage rule of the playback function is supported When the multiple used terminal devices can perform higher function processing than the one-use relay device 30 that only supports the use rule of the playback function, the use environment information analysis unit 122 determines that the control mode is the pass-through mode.

After determining the control mode, the use environment information analysis unit 122 requests the copyright information generation unit 123 to generate an LT, and according to the instruction of the use environment information analysis unit 122, the copyright information generation unit 123 starts to operate in the standard mode The format generates the LT (S105) and reads the usage rules of the requested device ID managed in the copyright-related information database 124, the content key used to decrypt the content, and the preview used to decrypt the preview content The key is used to prepare the LT of the standard mode. Note that the content just read out is subtracted from the usage rules managed in the copyright-related information database 124.

When the copyright information generation unit 123 completes the preparation of the LT in the standard mode format, it determines whether the format of the descriptor area 822 needs to be converted or is not based on the control mode determined by the use environment information analysis unit 122, The descriptor area 822 is the right information, such as usage rules (S106).

When the format needs to be converted (Yes in S106), that is, for example, when the control mode determined by the use environment information analysis unit 122 is a pass-through mode, the copyright information generating unit 123 sends the copyright information The conversion unit 130 transmits the descriptor area 822 as the right information to convert it into the black box area 823, which is the right information having the pass mode (S107). After the conversion, the copyright information generating unit 123 exchanges the descriptor area 822 of the LT for the black box area 823, and generates the LT of the pass mode by rewriting the control mode 813 from "1" to "0" (see FIG. 23A), and transmit the LT to the encryption unit 125.

Also, when the format conversion is required (Yes in S106) and the control mode determined by the use environment information analysis unit 122 is a batch mode, the copyright information generating unit 123 will be the descriptor of the right information The area 822 is transferred to the copyright information conversion unit 130 to convert it into a batch area 822 in the batch mode (S107). After the conversion, the copyright information generation unit 123 exchanges the LT descriptor area 822 for The black box area 824 generates the LT of the batch mode by rewriting the control mode 813 from "1 to "2 (see FIG. 23B ), and propagates the LT to the encryption unit 125.

When the format conversion is not required (No in S106), the copyright information generating unit 123 transmits the prepared LT of the standard mode to the encryption unit 125.

In the pass-through mode, the copyright information conversion unit 130 converts the right information into the right information in the format according to the copyright protection system (such as the right to play three times) of the device to be connected (such as the SD card 40) as the right information to be stored. Information in the black box area 823. In addition, in the batch mode, the copyright information conversion unit 130 is based on the copyright protection system of the device to be connected (such as the printer 50) (a batch of all formats corresponding to 100 printing rights, that is, "100 printing rights", "One printing right×100 etc.) converts the right information into right information having the same content in all processable formats as the information to be stored in the batch area 824.

The encryption unit 125 encrypts the payload 72 and the trailer 73 of the LT sent from the copyright information generating unit 123 in order to prevent an illegal use (S108). Note that in the pass-through mode, the encryption unit 125 encrypts the LT with its own encryption method, which is determined by the copyright protection function of the SD card 40.

The transmitting and receiving unit 110 distributes the LT encrypted by the encryption unit 125 to a terminal device (digital TV 20 or relay device 30) that sends a use request via the network 60 (S109). And the sending and receiving unit 110 judges whether there is a service end request (S110). When there is no service end request (No in S110), the processing flow returns to the acceptance process of the message of the next use request, and when there is a service end request (Yes in S110), the use The rule distribution service ends.

By repeating this process, the use request from the terminal device or the use request from the terminal device via the relay device 30 is accepted, and the use request is responded to without being affected by the processing capability of the relay device. Damage, even if its processing power is low, so the LT in a mode suitable for the terminal device can be allocated.

The communication among the SD card 40, the printer 50, the relay device 30, and the management device 10 of the license management system 1 will be described below.

24A and 24B are diagrams showing the sequence of communication among the SD card 40, the printer 50, the relay device 30, and the management device 10 included in the license management system 1.

First, as shown in FIG. 24A, the communication among the SD card 40, the relay device 30, and the management device 10 will be described.

When the SD card 40 is connected to the relay device 30, the relay device obtains the use environment information β of the SD card 40 (S1). The relay device 30 accepts the use request from the SD card 40 (S2). When the relay device 30 accepts the use request, it sends the use environment information β of the SD card 40 and the use environment information γ of the relay device 30 to the use request together or separately. The management device 10 (S3).

When the management device 10 receives the use request, it generates a pass-through mode LT based on the use environment information β of the SD card 40, the use environment information γ of the relay device 30, and the use request (S4). (See FIG. 23A), and transmit the generated LT of the pass-through mode to the relay device 30 (S5).

When the relay device receives the LT, it checks the control mode of the LT to confirm that it is the pass mode (T) and lets the LT pass without performing any processing to transfer the LT to the SD card 40(S7).

As a result, the license information issued by the management device is transmitted to the terminal device as it is, so the problem that the usage rule of the content indicated by the license information is restricted by the relay device can be avoided. happened.

Next, as shown in FIG. 24B, the communication among the printer 50, the relay device 30, and the management device 10 will be explained.

When the printer 50 is connected to the relay device 30, the relay device 30 obtains the use environment information δ of the printer 50 (the version and the like are unknown) (S11). In addition, the relay device 30 accepts a use request from the printer 50 (S12). When the relay device 30 accepts the usage request, it sends the usage environment information δ of the printer 50 and the usage environment information γ of the relay device 30 to the usage request together or separately. The management device 10 (S13).

When the management device 10 receives the usage request, it generates a batch mode including a large number of usage rules based on the usage environment information δ of the printer 50, the usage environment information γ of the relay device 30, and the usage request. LT (S14) (see FIG. 23B), and transmits the generated LT in the batch mode to the relay device 30 (S15).

When the relay device 30 receives the LT, it checks the control mode of the LT to confirm that it is a batch mode (B), selects one usage rule from a large number of usage rules (S16) and includes all usage rules. The LT of the selected usage rule is transmitted to the SD card 40 (S17).

As a result, license information representing multiple potential usage rules in various usage modes is allocated, even if the management device cannot understand the usage environment of the terminal device, among them, the usage rules most suitable for the terminal device are It is selected and transmitted to the terminal device as license information, and therefore, it is possible to avoid damaging the high capacity of the terminal device.

Note that the LT allocated from the management device 10 based on the request can be directly used on the terminal device connected to the network, such as the digital TV 20, without rebroadcasting.

According to the current license management system 1, the LT issued by the management device 10 is distributed to the terminal device via the relay device 30, but in the case of free use of LT, the relay device may Allocate the LT to the terminal device. That is, the relay device may have a function of issuing an LT.

Moreover, according to the above-mentioned embodiment, the terminal device is applied to a movable rendering device (rendering device) such as a digital TV 20, a relay device 30, and a printer 50, but it can also be applied to an information station or located in a convenient store. A fixed terminal among others.

On the other hand, the network 60 is applied to a digital broadcasting/communication satellite network and a broadband network, but it is not limited to this, and it can of course also be applied to a LAN and a WAN of a company or company.

Industrial applications As mentioned above, the management equipment, relay equipment and terminal equipment in the license management system can be applied to a computer equipment such as a server, a set-top box, a personal computer, a digital TV, a printer, a A mobile phone and a portable information terminal are used to distribute, rebroadcast and receive license information.